diff options
Diffstat (limited to 'docs/security.md')
| -rw-r--r-- | docs/security.md | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/docs/security.md b/docs/security.md index b21f60f8f8..8f1986642c 100644 --- a/docs/security.md +++ b/docs/security.md @@ -240,12 +240,13 @@ connectivity at all and using VPN. With this setting active, the device can neve with the internet outside of a VPN tunnel. ### macOS network-check + macOS needs to do a connectivity check before the daemon is able to connect to a tunnel, but the connectivity check will fail in the blocked state imposing a hefty timeout before a tunnel can be connected. The connectivity check requires a working DNS resolver and access to `captive.apple.com`. The feature is discussed in detail [here](allow-macos-network-check.md). -The app has a option to allow the network check to leak in the error state and during the +The app has an option to allow the network check to leak in the error state and during the disconnected state if _Always require VPN_ is enabled. When the option is enabled, the firewall will allow all DNS traffic coming from a mullvad specific unix group, and it will allow all traffic to a set of resolved IP addresses coming from root (as identified by a unix user ID of `0`). |